Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/7gpeu0S7hXZ8riAsKwy1ohmGU98.roa
File: 7gpeu0S7hXZ8riAsKwy1ohmGU98.roa (raw, json)
Hash identifier: yLiQ4BEaMhFQdskxNlE7aRv3rWf0cLts9Xjd3ePJwJ8=
Subject key identifier: EE:0A:5E:BB:44:BB:85:76:7C:AE:20:2C:2B:0C:B5:A2:19:86:53:DF
Certificate issuer: /CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Certificate serial: 019421446BC0D472775A7EBECC96B00FC57F
Authority key identifier: 7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/7gpeu0S7hXZ8riAsKwy1ohmGU98.roa
Signing time: Wed 01 Jan 2025 09:48:39 +0000
ROA not before: Wed 01 Jan 2025 09:48:39 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 43260
IP address blocks: 5.250.254.0/24 maxlen: 24
178.210.181.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:94:21:44:6b:c0:d4:72:77:5a:7e:be:cc:96:b0:0f:c5:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d32deda31fe8eafcdad6e2a06fde236e7d11d61
Validity
Not Before: Jan 1 09:48:39 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=ee0a5ebb44bb85767cae202c2b0cb5a2198653df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:92:43:71:21:22:d9:26:54:0b:78:bd:bf:38:
75:c6:fa:bc:cd:61:83:78:b2:93:3c:0c:0c:e4:3c:
4a:b9:c5:09:e2:60:4e:83:f5:a9:1c:2a:9f:22:86:
36:30:a1:64:ec:15:ab:c8:a0:bc:7b:d3:e6:1d:bb:
fb:c9:84:24:4e:75:a1:18:29:b8:95:3e:85:9f:61:
23:60:1b:98:34:45:55:7c:d6:94:81:3e:17:be:15:
72:67:4b:ab:4a:8f:e1:a6:76:e7:b3:a0:30:58:b3:
bd:f7:fe:b7:32:89:3a:ee:30:12:3f:7f:e2:7d:e2:
ae:35:7d:4a:6b:64:08:10:9c:3f:e1:9a:81:d3:66:
19:6e:11:f9:79:2e:75:9a:15:02:b2:f3:3d:25:1a:
db:67:cd:0d:76:32:2b:3b:4d:aa:90:6f:4d:b9:6f:
08:13:f6:f0:32:99:68:a0:e3:be:de:23:fa:22:75:
0a:18:a0:2d:d2:9f:da:70:ea:2a:bd:59:ce:c8:31:
4d:f6:87:8c:04:2d:cb:e8:17:b4:f1:e7:e4:42:0c:
52:d8:15:7a:e0:b8:1f:cb:87:dc:8c:65:0d:3e:f5:
c9:35:f9:c5:7e:2e:36:8a:ea:f4:76:23:ef:f9:1e:
45:0b:f6:8f:64:fe:22:0b:27:c1:dd:06:6d:32:9f:
56:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:0A:5E:BB:44:BB:85:76:7C:AE:20:2C:2B:0C:B5:A2:19:86:53:DF
X509v3 Authority Key Identifier:
keyid:7D:32:DE:DA:31:FE:8E:AF:CD:AD:6E:2A:06:FD:E2:36:E7:D1:1D:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fTLe2jH-jq_NrW4qBv3iNufRHWE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/7gpeu0S7hXZ8riAsKwy1ohmGU98.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/c43ed2-70b3-45d8-aa28-53fb018a8c0e/1/fTLe2jH-jq_NrW4qBv3iNufRHWE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.250.254.0/24
178.210.181.0/24
Signature Algorithm: sha256WithRSAEncryption
6f:da:2c:52:06:93:e8:49:76:71:0f:fc:69:d0:6f:46:01:72:
7a:0d:6b:91:13:a9:04:67:f8:7a:b5:19:fa:f9:12:b7:b6:83:
83:9b:c9:bf:91:2c:a5:e5:d3:4b:b6:ce:fe:6b:08:ba:73:01:
5e:65:a0:f5:d1:08:90:ad:40:59:a4:26:20:23:1b:4a:94:fe:
87:bb:3e:84:a8:9a:1b:90:80:d9:33:e0:7c:04:5a:06:92:95:
9c:cb:1e:b2:6e:ca:34:75:15:4a:a4:82:a4:48:1e:5f:06:ed:
b8:1b:17:06:47:1b:2e:0b:f3:20:61:19:fe:0b:ac:fa:40:51:
d4:1f:1b:cf:01:7c:0e:30:8a:38:a7:79:99:d2:10:3e:f1:dc:
2c:7e:b1:3d:4c:22:f6:c2:e2:d9:1c:0f:4b:f1:aa:81:79:11:
93:27:ca:7f:ce:b6:6e:79:52:fd:a5:5f:3b:5e:3b:8e:79:99:
4f:2b:1f:e0:17:7d:a4:9d:bc:14:54:32:83:5b:6f:51:61:46:
72:85:00:8b:9a:37:bd:6b:ed:30:c6:56:69:fc:ff:03:e0:90:
3e:0a:c0:85:6e:36:72:f0:60:45:5b:7c:64:42:dd:39:70:32:
05:23:70:4f:fc:fe:88:d1:43:56:43:61:7b:1f:c0:f3:50:22:
85:86:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 01:58:03 2025 by rpki-client